Design: Secret Detection Exclusions - MVC
Background
This issue defines the MVC design proposal for a secret detection allowlist that will live within GitLab's UI. The Allowlist enables customers to ignore patterns that they believe generate false positives. Must-have features are outlined in the parent epic. To view the full design vision for the allowlist, visit Design: Secret Detection Exclusions - Vision (#466441 - closed)
Proposal
Design assets
Summary of proposed changes
- New UI Page: Develop a dedicated page for managing a secret detection allowlist at the project level.
- The new UI page should be for "Secret detection configuration", with a tab for the allowlist. In the future we will add other tabs to the configuration page for other options such as rule management.
- For the MVC, the allowlist only needs to support Secret Push Protection
- Add configuration link to secret detection cards: On the security configuration page, add a new icon button to both secret detection cards for accessing the secret detection configuration page in the UI.
Edited by Michael Fangman
